Import upstream v0.16.22, stripped

Upstream commit: 474dd0229cb20cf513036619781ed97bd8073c3f Enterprise-only files removed or emptied: 63 Enterprise-only snippets removed: 117 in 50 files Dangling module declarations removed: 5 Cargo edits turning enterprise off: 14 Verification: clean Enterprise feature gates left for rebuilt features: 19 in 18 files Produced by tools/fork/strip.py. The full report is in docs/fork/strip-reports/ on main.
2026-09-18 10:21:56 -07:00
commit 7dae9b29fd
1650 changed files with 485521 additions and 0 deletions
@@ -0,0 +1,14 @@
+#!/bin/bash
+set -e
+
+# Wait for PowerDNS to be ready (started by default entrypoint)
+echo "Waiting for PowerDNS to start..."
+for i in $(seq 1 30); do
+  if pdnsutil list-all-zones 2>/dev/null; then
+    break
+  fi
+  sleep 1
+done
+
+# Run zone initialization
+bash /etc/powerdns/init-zone.sh
@@ -0,0 +1,42 @@
+#!/bin/bash
+set -e
+
+# Wait for the SQLite database to be ready
+sleep 2
+
+# Skip if already initialized
+if pdnsutil list-zone stalwart.test >/dev/null 2>&1; then
+    echo "Zone stalwart.test already exists; skipping init."
+    exit 0
+fi
+
+# Create the zone with default SOA + NS
+pdnsutil create-zone stalwart.test ns1.stalwart.test
+pdnsutil set-kind stalwart.test native
+
+# Replace the default SOA with our own
+pdnsutil replace-rrset stalwart.test '' SOA 'ns1.stalwart.test. admin.stalwart.test. 2024010101 3600 900 604800 86400'
+
+# Add basic records
+pdnsutil add-record stalwart.test 'ns1' A '127.0.0.1'
+pdnsutil add-record stalwart.test '' A '127.0.0.1'
+pdnsutil add-record stalwart.test '' MX '10 mail.stalwart.test.'
+pdnsutil add-record stalwart.test 'mail' A '127.0.0.1'
+
+# Add a sample TLSA record
+# Usage=3 (DANE-EE), Selector=1 (SubjectPublicKeyInfo), Matching=1 (SHA-256)
+pdnsutil add-record stalwart.test '_25._tcp.mail' TLSA '3 1 1 0000000000000000000000000000000000000000000000000000000000000000'
+
+# Import static TSIG key for RFC2136 dynamic updates
+# Key: stalwart-update-key / HMAC-SHA256
+# Base64 secret: c3RhbHdhcnQtdGVzdC10c2lnLXNlY3JldC1rZXkxMjM0NTY3ODkw
+pdnsutil import-tsig-key stalwart-update-key hmac-sha256 'c3RhbHdhcnQtdGVzdC10c2lnLXNlY3JldC1rZXkxMjM0NTY3ODkw'
+pdnsutil activate-tsig-key stalwart.test stalwart-update-key primary
+pdnsutil set-meta stalwart.test TSIG-ALLOW-DNSUPDATE stalwart-update-key
+pdnsutil set-meta stalwart.test ALLOW-DNSUPDATE-FROM '0.0.0.0/0'
+
+
+echo "PowerDNS zone setup complete."
+echo "TSIG key name:      stalwart-update-key"
+echo "TSIG algorithm:     hmac-sha256"
+echo "TSIG secret (b64):  c3RhbHdhcnQtdGVzdC10c2lnLXNlY3JldC1rZXkxMjM0NTY3ODkw"
@@ -0,0 +1,3 @@
+dnsupdate=yes
+allow-dnsupdate-from=0.0.0.0/0
+zone-cache-refresh-interval=0